Active Directory Basics

Step 1 — Create the Windows Server VM in Azure

In this step, you will create a low-cost Windows Server virtual machine in Azure. Most settings can be left at their defaults — only the critical ones are called out explicitly.

Cost Expectation
  • VM size: B2s
  • Estimated cost: ~$25–40/month
  • Stop/deallocate the VM when not in use to reduce cost (extremely cheap if deleted)

1. Create the Virtual Machine

  1. Log into the Azure Portal
  2. Navigate to Virtual Machines
  3. Select Create → Azure virtual machine

2. Basics Tab (Important)

  • Subscription: Leave default
  • Resource Group: Create a new one (e.g. ad-lab-rg)
  • Virtual Machine Name: DC01
  • Region: Closest region to you
  • Availability Options: Leave default
  • Image: Windows Server 2022 Datacenter
  • Size: B2s or similar

3. Administrator Account

  • Username: Any name
  • Password: Strong password — save this

This local administrator account will later become your first domain administrator.

4. Inbound Port Rules

  • Public inbound ports: Allow selected ports
  • Inbound ports: RDP (3389)

5. Disks Tab

  • OS disk type: Standard SSD
  • Leave all other settings at their defaults

6. Networking Tab (Do Not Skip)

  • Virtual network: Create new
  • Subnet: Default
  • Public IP: Create new
  • NIC network security group: Basic
  • Inbound ports: RDP (3389)
Why this matters

Your Domain Controller and future client VM must be on the same virtual network. Fixing this later causes DNS and authentication issues.

7. Management, Monitoring, Advanced, Tags

  • Leave all settings at their defaults

8. Review + Create

  • Review your settings
  • Select Create
  • Wait for deployment to complete

9. Set a Static Private IP (Recommended)

  1. Open the VM → Networking
  2. Select the Network Interface (NIC)
  3. Go to IP configurations
  4. Change Private IP assignment from Dynamic to Static
  5. Save your changes

This prevents IP changes that can break DNS and Active Directory later.

Checkpoint

  • VM deployed successfully
  • You can RDP into DC01
  • Windows Server desktop loads
  • Private IP is set to Static

If any of these fail, stop and fix the issue before moving on.